mirror of
https://github.com/github/codeql.git
synced 2025-12-17 01:03:14 +01:00
Crypto: Example query reorg - moving queries of this PR into 'examples' subdirectories.
This commit is contained in:
@@ -4,6 +4,7 @@
|
|||||||
* @id java/quantum/unknown-kdf-iteration-count
|
* @id java/quantum/unknown-kdf-iteration-count
|
||||||
* @kind problem
|
* @kind problem
|
||||||
* @precision medium
|
* @precision medium
|
||||||
|
* @problem.severity error
|
||||||
* @tags quantum
|
* @tags quantum
|
||||||
* experimental
|
* experimental
|
||||||
*/
|
*/
|
||||||
@@ -12,13 +12,11 @@
|
|||||||
import java
|
import java
|
||||||
import experimental.quantum.Language
|
import experimental.quantum.Language
|
||||||
|
|
||||||
from Crypto::KeyOperationAlgorithmNode op, DataFlow::Node configSrc, int keySize, string algName
|
from Crypto::KeyOperationAlgorithmNode op, int keySize, string algName
|
||||||
where
|
where
|
||||||
keySize = op.getKeySizeFixed() and
|
keySize = op.getKeySizeFixed() and
|
||||||
keySize < 2048 and
|
keySize < 2048 and
|
||||||
algName = op.getAlgorithmName() and
|
algName = op.getAlgorithmName() and
|
||||||
// Can't be an elliptic curve
|
// Can't be an elliptic curve
|
||||||
not Crypto::isEllipticCurveAlgorithmName(algName)
|
op.getAlgorithmType() != Crypto::KeyOpAlg::AlgorithmType::EllipticCurveType()
|
||||||
select op,
|
select "Use of weak asymmetric key size (" + keySize.toString() + " bits) for algorithm " + algName
|
||||||
"Use of weak asymmetric key size (" + keySize.toString() + " bits) for algorithm " +
|
|
||||||
algName.toString() + " at config source $@", configSrc, configSrc.toString()
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
query: experimental/quantum/Analysis/InsecureIVorNonceSource.ql
|
|
||||||
postprocess:
|
|
||||||
- utils/test/PrettyPrintModels.ql
|
|
||||||
- utils/test/InlineExpectationsTestQuery.ql
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
query: experimental/quantum/Analysis/UnknownIVorNonceSource.ql
|
|
||||||
postprocess:
|
|
||||||
- utils/test/PrettyPrintModels.ql
|
|
||||||
- utils/test/InlineExpectationsTestQuery.ql
|
|
||||||
@@ -1 +0,0 @@
|
|||||||
experimental/quantum/Analysis/ReusedNonce.ql
|
|
||||||
@@ -0,0 +1,4 @@
|
|||||||
|
query: experimental/quantum/Examples/InsecureIVorNonceSource.ql
|
||||||
|
postprocess:
|
||||||
|
- utils/test/PrettyPrintModels.ql
|
||||||
|
- utils/test/InlineExpectationsTestQuery.ql
|
||||||
@@ -0,0 +1,4 @@
|
|||||||
|
query: experimental/quantum/Examples/UnknownIVorNonceSource.ql
|
||||||
|
postprocess:
|
||||||
|
- utils/test/PrettyPrintModels.ql
|
||||||
|
- utils/test/InlineExpectationsTestQuery.ql
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
experimental/quantum/Examples/ReusedNonce.ql
|
||||||
Reference in New Issue
Block a user